Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/_vHvfO5xWjPTvtESiBT5Osb37rs.roa
File: _vHvfO5xWjPTvtESiBT5Osb37rs.roa (raw, json)
Hash identifier: bjksqaE26dH19p3QBdJo8X7GmUZnzPcG7SRjnNtbygc=
Subject key identifier: FE:F1:EF:7C:EE:71:5A:33:D3:BE:D1:12:88:14:F9:3A:C6:F7:EE:BB
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 018FDAE84A6E4F2F4CC99318E0BC35A11A87
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/_vHvfO5xWjPTvtESiBT5Osb37rs.roa
Signing time: Sun 02 Jun 2024 21:43:27 +0000
ROA not before: Sun 02 Jun 2024 21:43:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.84.112.0/23 maxlen: 24
45.84.114.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jul 2024 17:47:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:da:e8:4a:6e:4f:2f:4c:c9:93:18:e0:bc:35:a1:1a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Jun 2 21:43:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fef1ef7cee715a33d3bed1128814f93ac6f7eebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e7:13:a1:8b:44:5f:87:83:5a:7f:f7:e3:09:
2b:dc:02:f1:60:82:40:e2:55:f2:c0:00:7b:f1:4e:
e0:b0:41:f9:80:1d:ea:4f:fc:00:62:32:5d:c4:48:
ed:ba:b5:66:8b:6e:4e:65:1e:3e:0a:32:a2:fd:3f:
22:cd:6a:52:38:23:50:f0:18:96:66:e6:54:2e:6c:
de:a7:a1:c1:4f:f0:52:3f:3f:85:cf:d7:34:82:dc:
65:f2:ce:8c:24:58:8e:bc:1a:37:57:ae:8f:bf:2a:
79:e9:4d:1a:64:c0:b8:f2:74:5a:53:ca:43:0e:b1:
e9:12:bf:08:c4:3e:d2:09:fe:9b:91:27:d2:28:b0:
09:01:d8:91:b7:e7:bd:99:d1:e2:db:d2:95:b3:36:
fe:ac:98:23:ab:50:a8:fe:0c:b3:84:44:c4:ea:c4:
58:bd:15:3a:16:cb:14:41:22:cf:d7:c6:e0:35:f8:
30:96:c1:b7:f7:63:1f:4e:27:b1:ce:76:a3:5d:88:
7e:d0:69:1e:92:3f:28:9e:23:8c:f8:39:15:80:b8:
43:a3:36:6c:7b:a0:c7:00:1b:08:57:de:11:2c:17:
ec:da:b4:53:28:2c:ae:b2:c7:84:c6:af:62:9d:77:
71:5b:6d:96:0e:61:42:7f:8f:1e:64:4b:02:34:47:
1f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F1:EF:7C:EE:71:5A:33:D3:BE:D1:12:88:14:F9:3A:C6:F7:EE:BB
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/_vHvfO5xWjPTvtESiBT5Osb37rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.112.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:e3:83:30:6f:f2:c9:ae:76:82:af:97:fb:c3:75:2e:72:6b:
0f:96:0c:45:1e:bd:29:56:ad:10:da:26:6e:28:f5:4d:f3:80:
46:20:3a:0e:6c:3e:06:24:f2:f3:8c:50:46:6d:fd:ad:e7:f1:
b3:f3:4e:25:82:aa:42:96:1d:79:b2:b2:a7:b5:fd:e0:76:62:
42:a4:30:85:69:a5:89:d9:ef:d3:4e:fa:db:1a:e1:09:ee:ec:
4c:17:dd:9d:ea:5d:67:3b:7b:7f:3e:a1:5a:c8:e3:dc:e4:39:
45:45:c2:5d:d4:3c:b8:44:a3:12:f1:0f:88:30:c6:b9:e3:15:
3a:18:f5:31:a6:a5:89:b8:e2:86:af:c9:ee:aa:5f:7e:9c:e1:
36:f5:3b:02:4d:69:16:0c:67:e9:bb:07:15:c5:bb:ea:c3:e5:
a8:75:0b:e1:b3:82:e8:52:6c:be:f9:b0:7d:52:bc:c4:1e:64:
49:13:12:b7:0d:be:17:b6:13:6d:64:ef:27:1c:3a:92:e6:89:
d3:d9:46:7b:99:72:81:5b:d7:39:42:dd:df:94:f8:02:c0:64:
38:b4:13:be:99:c6:92:8f:c7:c1:6c:43:2f:59:28:bf:3b:08:
93:91:c1:3d:52:b9:75:d6:52:08:6e:51:e7:c0:c0:4b:ce:42:
ad:04:99:2d
-----BEGIN CERTIFICATE-----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Generated at Mon Jul 8 19:22:18 2024 by rpki-client on console-ams.rpki-client.org